CVE-2023-52433 netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

2024-02-2012:52:56

Linux

github.com

linux kernel

netfilter

nft_set_rbtree

transaction

vulnerability

async gc

expired element

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

JSON

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

New elements in this transaction might expired before such transaction
ends. Skip sync GC for such elements otherwise commit path might walk
over an already released object. Once transaction is finished, async GC
will collect such expired element.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "cb4d00b56367",
        "lessThan": "9db9feb841f7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c357648929c8",
        "lessThan": "03caf75da105",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "146c76866795",
        "lessThan": "c323ed65f66e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "479a2cf52593",
        "lessThan": "9af7dfb3c9d7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "df650d6a4bf4",
        "lessThan": "9a8c544158f6",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f6c383b8c31a",
        "lessThan": "e3213ff99a35",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f6c383b8c31a",
        "lessThan": "2ee52ae94baa",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/netfilter/nft_set_rbtree.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.5"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.5",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.5.4",
        "versionType": "custom",
        "lessThanOrEqual": "6.5.*"
      },
      {
        "status": "unaffected",
        "version": "6.6",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/netfilter/nft_set_rbtree.c"
    ],
    "defaultStatus": "affected"
  }
]